lighttpd 1.5.0

CPE Details

lighttpd 1.5.0
lighttpd
lighttpd
1.5.0
2009-04-24
17h04 +00:00
2009-04-24
17h04 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:lighttpd:lighttpd:1.5.0:*:*:*:*:*:*:*

Informations

Vendor

lighttpd

Product

lighttpd

Version

1.5.0

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2011-4362 2011-12-24 18h00 +00:00 Integer signedness error in the base64_decode function in the HTTP authentication functionality (http_auth.c) in lighttpd 1.4 before 1.4.30 and 1.5 before SVN revision 2806 allows remote attackers to cause a denial of service (segmentation fault) via crafted base64 input that triggers an out-of-bounds read with a negative index.
5
CVE-2010-0295 2010-02-03 18h00 +00:00 lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to cause a denial of service (memory consumption) by breaking a request into small pieces that are sent at a slow rate.
5